Description

Ubuntu has issued an update for openjdk-6. This fixes a vulnerability, which can be exploited by malicious people to bypass certain security features.

The vulnerability is caused due to IcedTea for Java not properly verifying signatures when handling multiply signed or partially signed JAR files, which can be exploited to e.g. trick a user into executing arbitrary code that appears to come from a verified source.

Note: This also provides updated armel (ARM) architecture packages for Ubuntu 10.10, which fix CVE-2010-4351.

Solution
Apply updated packages.
Further details available to Secunia VIM customers

Original Advisory
USN-1055-1:
https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-February/001238.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers